The Shade.WPF.Controls NuGet package contains malicious code in multiple specific versions. This is a supply chain threat where the package itself is compromised to include harmful functionality. There is no CVSS score available, and no official patch or remediation guidance has been provided. Users should avoid using the affected versions and remove them if already in use.